ZA
Product
zarf
2
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add zarf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29064 | 8.2 | Mar 6 | Zarf: Symlink targets in archives are not validated against destination directory Affected: >= 0.54.0, < 0.73.1 |
| CVE-2026-40090 | 7.1 | Apr 14 | Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write Affected: >= 0.23.0, < 0.74.2 |
Showing 2